blob: 6918a9ad60c57125ac030775af56a95c8e5a3449 [file] [log] [blame]
module = "github.com/tendermint/tendermint"
package = "github.com/tendermint/tendermint/rpc/client"
description = """
A malicious server can exploit support for gzip compression to force
the client to consume significant system resources, leading to crashes.
"""
credit = "@guagualvcha"
symbols = ["makeHTTPClient"]
published = "2021-04-14T12:00:00Z"
[[versions]]
fixed = "v0.31.1"
[links]
commit = "https://github.com/tendermint/tendermint/commit/03085c2da23b179c4a51f59a03cb40aa4e85a613"
pr = "https://github.com/tendermint/tendermint/pull/3430"